spamass-milter doesn't look in the email headers at all for the username. Could you add "-d misc,rcpt" to your spamass-milter options, send another message, and the paste in the /var/log/maillog lines it generates?